$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json) Hash identifier: zBs0RD0YIjT4XIUbamOpxLgjmH1yCwqVB3SSOymZQsA= Subject key identifier: BF:38:D0:BE:67:90:8D:42:B6:F8:4D:AE:AB:D8:9C:8E:41:C6:9B:29 Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft Manifest number: EA Signing time: Fri 13 Jun 2025 04:21:40 +0000 Manifest this update: Fri 13 Jun 2025 04:21:40 +0000 Manifest next update: Fri 20 Jun 2025 04:21:40 +0000 Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: X7nml7IgdCOfZHkFIlfANuiAcpX5po7LSEHpnK/zTo8=) 2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: Ga1jsRYecaBQWadBOEJf3Y9akBHnUgs+85T4mwwYjp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Validity Not Before: Jun 13 04:21:40 2025 GMT Not After : Jun 20 04:21:40 2025 GMT Subject: CN=684ba754-1bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:db:ee:70:94:1b:18:3a:5f:4e:2f:08:fd: 5a:37:dc:d8:e6:f8:f5:4b:57:7e:f8:61:dd:61:42: a8:ca:c5:bb:8c:69:e8:44:81:44:25:68:f0:4f:d0: 95:c0:7b:83:a7:ee:df:bf:08:05:30:34:46:76:7d: 09:ad:f0:95:3a:99:cb:c9:a0:96:0d:44:00:4a:27: 65:28:b5:f6:6a:23:90:63:f2:e8:aa:80:6d:af:3d: 13:5e:cd:3b:97:3a:93:3b:df:5e:c9:35:e9:55:7b: 91:5c:fc:97:de:10:49:6d:dd:6d:9c:50:f1:90:03: f4:d6:47:c6:90:38:ea:09:d6:3c:5c:0a:64:79:58: 0e:dc:e2:64:ba:d2:2c:e7:5b:27:13:b4:19:cb:81: ec:63:d3:39:08:ca:85:29:f9:57:eb:55:e1:48:62: 4b:44:8b:c2:47:68:8b:c4:9c:3f:99:ef:e7:ab:d8: 95:6d:32:2c:2e:0c:24:3b:ab:0f:d2:18:ed:bc:ce: 87:99:c9:68:2e:fe:72:20:8f:f9:84:5b:90:1f:f8: 61:48:d4:4b:24:26:5e:d1:cc:d4:2c:e1:3f:f3:44: e1:2e:ce:7e:8a:1b:2e:ce:da:30:81:54:0a:38:9c: 64:03:86:21:84:fa:43:b9:b5:3f:0f:c5:d7:63:ff: 87:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:38:D0:BE:67:90:8D:42:B6:F8:4D:AE:AB:D8:9C:8E:41:C6:9B:29 X509v3 Authority Key Identifier: keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:7c:56:41:4f:5c:b4:4e:fb:17:9d:72:e6:03:58:8f:94:03: 5a:db:33:f3:6b:82:41:ca:62:54:67:35:9d:82:20:9d:1c:36: cb:7a:27:18:81:be:da:bd:61:32:07:0a:b1:4c:b7:4b:7b:81: cf:6a:0a:91:ff:82:93:e2:81:09:c0:8d:77:82:eb:c8:0f:d3: c3:7a:22:2f:e4:65:fb:ec:bd:12:2d:62:dd:bb:4f:3d:2b:8a: de:d2:3d:e0:89:79:a9:9f:ef:ea:7d:23:2b:26:46:63:fd:01: 92:af:77:93:f0:86:2e:2d:81:0c:8b:5b:25:90:cb:4e:8f:a6: 85:90:3e:41:df:92:66:e7:35:a9:b0:00:b9:57:69:1a:f1:f5: e9:38:09:32:14:94:b9:62:6c:c5:b5:bd:08:c1:c1:4d:6f:96: a7:39:36:db:b1:3b:c8:d2:ea:dd:86:57:91:86:aa:e1:96:97: 66:36:63:df:5e:89:14:46:0b:cd:75:20:94:f7:93:01:18:9a: 2f:d6:3d:d1:de:cd:4a:bc:15:33:5d:26:89:42:87:b5:ab:f4: fa:1c:6b:11:21:03:67:b3:5e:b3:71:46:dc:a4:89:6a:9e:4c: fc:4f:df:b9:0b:38:b4:3c:c1:b6:3a:9c:6a:7a:3a:65:01:3c: 72:0b:c4:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU1REYxMTAvBgNVBAUTKDc1RDMxOTY5NTY5QjVDMERGMERBNTNCM0Q5MzEzNjYz MzQ3MjEwODIwHhcNMjUwNjEzMDQyMTQwWhcNMjUwNjIwMDQyMTQwWjAYMRYwFAYD VQQDEw02ODRiYTc1NC0xYmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucDb7nCUGxg6X04vCP1aN9zY5vj1S1d++GHdYUKoysW7jGnoRIFEJWjwT9CV wHuDp+7fvwgFMDRGdn0JrfCVOpnLyaCWDUQASidlKLX2aiOQY/LoqoBtrz0TXs07 lzqTO99eyTXpVXuRXPyX3hBJbd1tnFDxkAP01kfGkDjqCdY8XApkeVgO3OJkutIs 51snE7QZy4HsY9M5CMqFKflX61XhSGJLRIvCR2iLxJw/me/nq9iVbTIsLgwkO6sP 0hjtvM6HmcloLv5yII/5hFuQH/hhSNRLJCZe0czULOE/80ThLs5+ihsuztowgVQK OJxkA4YhhPpDubU/D8XXY/+HIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL840L5n kI1CtvhNrqvYnI5BxpspMB8GA1UdIwQYMBaAFHXTGWlWm1wN8NpTs9kxNmM0chCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTVERi9DQkVGQ0Q5Q0U2 NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhBM3cybE96MlRFMll6UnlF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTVERi9DQkVGQ0Q5Q0U2NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhB M3cybE96MlRFMll6UnlFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChfFZBT1y0TvsXnXLmA1iPlANa2zPza4JBymJUZzWdgiCdHDbLeicY gb7avWEyBwqxTLdLe4HPagqR/4KT4oEJwI13guvID9PDeiIv5GX77L0SLWLdu089 K4re0j3giXmpn+/qfSMrJkZj/QGSr3eT8IYuLYEMi1slkMtOj6aFkD5B35Jm5zWp sAC5V2ka8fXpOAkyFJS5YmzFtb0IwcFNb5anOTbbsTvI0urdhleRhqrhlpdmNmPf XokURgvNdSCU95MBGJov1j3R3s1KvBUzXSaJQoe1q/T6HGsRIQNns16zcUbcpIlq nkz8T9+5Czi0PMG2OpxqejplATxyC8TC -----END CERTIFICATE-----Generated at Sun Jun 15 05:13:59 2025 by rpki-client